Q1 — AWS SAA-C03 Ch.13

Question 1 of 100 | ← Chapter 13

Q901. A company creates dedicated AWS accounts in AWS Organizations for its business units. Recently, an important notification was sent to the root user email address of a business unit account instead of the assigned account owner. The company wants to ensure that all future notifications can be sent to different employees based on the notification categories of billing, operations, or security.Which solution will meet these requirements MOST securely?

Correct Answer: B. Configure each AWS account to use a different email distribution list for each business unit that the company manages. Configure each distribution list with administrator email addresses that can respond to alerts. Configure alternate contacts for each AWS account with corresponding distribution lists for the billing team, the security team, and the operations team for each business unit.

Explanation

To meet the requirement of securely sending notifications to different employees based on the notification categories of billing, operations, or security, the following solution can be implemented:B. Configure each AWS account to use a different email distribution list for each business unit that the company manages. Configure each distribution list with administrator email addresses that can respond to alerts. Configure alternate contacts for each AWS account with corresponding distribution lists for the billing team, the security team, and the operations team for each business unit.In this solution, each AWS account is configured to use a different email distribution list for each business unit. This ensures that notifications are sent to the appropriate individuals responsible for each category (billing, operations, security) within the business unit. By configuring distribution lists with administrator email addresses, the designated personnel can receive and respond to alerts promptly.Option A suggests configuring each AWS account to use a single email address that the company manages and ensuring that all account owners can access the email account to receive notifications. While this approach centralizes the email address, it does not provide the granularity of sending notifications based on different categories to different individuals. It also introduces the risk of multiple individuals having access to a single email account, which may not be the most secure solution.Option C suggests configuring each AWS account root user email address to be the individual company-managed email address of one person from each business unit. This approach limits the notification recipient to a single individual per business unit and does not provide the flexibility to send notifications to different individuals based on the category. It also relies heavily on individual email accounts, which may not be the most efficient or secure method for managing notifications.Option D suggests configuring each AWS account root user to use email aliases that go to a centralized mailbox. While this approach centralizes the mailbox for receiving notifications, it does not provide the granularity of sending notifications based on different categories to different individuals. It also introduces complexity in managing and routing notifications through aliases.In summary, to meet the requirement of securely sending notifications to different employees based on notification categories, configuring each AWS account to use a different email distribution list for each business unit (Option B) is the most secure and suitable solution.